Browse CVEs

MEDIUM 5.5 CVE-2015-9021 In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled. Android Mitigation only Fix from $1,6002017-06-13 MEDIUM 5.5 CVE-2015-9024 In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications. Android Mitigation only Fix from $1,6002017-06-13 MEDIUM 5.5 CVE-2016-10332 In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications. Android Mitigation only Fix from $1,6002017-06-13 MEDIUM 5.5 CVE-2016-10333 In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS. Android No fix yet Fix from $1,6002017-06-13 MEDIUM 5.5 CVE-2016-10334 In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten. Android No fix yet Fix from $1,6002017-06-13 HIGH 7.5 CVE-2014-7919 b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash). Android Mitigation only Fix from $1,9502017-06-08 MEDIUM 6.5 CVE-2015-1207 Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory co… Chrome Mitigation only Fix from $1,6002017-06-06 MEDIUM 6.5 CVE-2015-3830 The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a vi… Android No fix yet Fix from $1,6002017-06-06 HIGH 7.8 CVE-2017-8245 In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that … Android Mitigation only Fix from $1,9502017-05-12 HIGH 7.8 CVE-2017-8246 In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Late… Android Mitigation only Fix from $1,9502017-05-12 HIGH 7.0 CVE-2017-8244 In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->fille… Android Mitigation only Fix from $1,9502017-05-12 HIGH 7.5 CVE-2016-0833 Android allows users to cause a denial of service. Android No fix yet Fix from $1,9502017-04-21 CRITICAL 9.8 CVE-2016-1155 HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or … Android Mitigation only Fix from $2,3002017-04-13 CRITICAL 9.8 CVE-2014-7920 mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. Android Mitigation only Fix from $2,3002017-04-13 CRITICAL 9.8 CVE-2014-7921 mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920. Android Mitigation only Fix from $2,3002017-04-13 CRITICAL 9.8 CVE-2013-6647 A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. Chrome Mitigation only Fix from $2,3002017-04-11 HIGH 7.8 CVE-2017-0544 An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. This issue is rated as Hi… Android Mitigation only Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0545 An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a p… Android Mitigation only Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0546 An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the context of … Android Mitigation only Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0554 An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its p… Android Mitigation only Fix from $1,9502017-04-07 HIGH 7.0 CVE-2017-0553 An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi… Android Mitigation only Fix from $1,9502017-04-07 MEDIUM 5.5 CVE-2017-0548 A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This i… Android Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.5 CVE-2017-0555 An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its permission … Android Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.5 CVE-2017-0559 An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This i… Android Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.5 CVE-2017-0560 An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. … Android Mitigation only Fix from $1,6002017-04-07 HIGH 7.8 CVE-2016-5857 The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted applicati… Android Mitigation only Fix from $1,9502017-03-20 MEDIUM 5.5 CVE-2017-0498 A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. This issue is… Android Mitigation only Fix from $1,6002017-03-08 MEDIUM 5.5 CVE-2017-0499 A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. This issue is rated as … Android Mitigation only Fix from $1,6002017-03-08 HIGH 7.8 CVE-2017-0466 A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media … Android Mitigation only Fix from $1,9502017-03-08 HIGH 7.8 CVE-2017-0467 A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media … Android Mitigation only Fix from $1,9502017-03-08